Add go program to auth and perform the collection

[jeffmendoza]

No description provided.

[trmiller]

This check will fail until we have a working version of the service & cli - should we turn it off for now?

[jeffmendoza]

This includes all the code needed for now, no cli changes needed. We can update this to run guac directly instead of using the go code here if/when we merge and release that capability into guac.

To get the check to run, we need to set:

          gql-addr: ${{ secrets.GQLADDR }}
          token-url: ${{ secrets.TOKENURL }}
          client-id: ${{ secrets.CLIENTID }}

And have the service up. And add a spdx.json to the repo.